The place to discuss all HOPE-related topics.
You are not logged in.
You'll find sections on just about anything of interest to HOPE attendees. If you think something is missing start a thread in the "General Questions" forum and/or ask people about it. Thanks for participating and see you at HOPE!
Set up a network for CTF.
Novice - continuous, skill development, multiple platforms. Perhaps with mentors available.
Advanced - classic CTF, timed, increasing difficulty of flags.
Offline
This was supposed to happen, but apparently the organizers didn't do a very good job or not enough people signed up or something. It's certainly a good idea, since it draws crowds. I think the "novice" difficulty should try to reach out to people who don't know what this "game" is. I thought it was a mod for Quake for the longest time!
Offline
The version I've seen is where a bunch of people try to remotely access a secure system, but the person trying to organize it for the past conference was saying that's only one quarter of the game and that another part was some osrt of robot maze. I wasn't really clear on the other two parts. It seemed very complicated.
Offline
Yeah, it would take some minimal effort, hardware, and planning, but it could definately be done. Local computer clubs/2600 chapters could perhaps be encouraged to put them on, as they might have a built in resource base. I agree with Arseny that it could be a 'general public' educational device as well.
Offline
Not afaik, but there is lots of information out there, particularly at honeynet.org. For the novices, it could be as simple as just putting old/vulnerable version of web apps and NOS's...could even do multiple virtual instances. The more advanced levels would need more planning to make the flags both dependent on the previous flag and more difficult to obtain (i.e. firewall traversal to DMZ to internal network, to several layers of variously hardened machines, etc).
Offline
Okay, so you're describing the network honeypot game that most hackers mean when they say "CTF," not some expanded quadathalon affair with physical construction involved.
Offline
hehe....exactly!
Offline
Indeed it would be great to see! Make certain services that must be on machines and allow people to bring there own or donate allready running servers (which they can prove they own) to be used
You could have a system where people are trying to get in and the owners are trying to keep them out
Now that would be fun!!
Offline
Good ideas....in that vein, we could setup IDS's to monitor what was happening and further the educational experience for the masses.
Offline
I just keep thinking laser tag.
and laser tag sounds like a great idea.
Offline
Lazer tag, Lazer tag... I'm in ![]()
Offline
i'm all up for either CTF or laser tag. ![]()
Offline
soup wrote:
I just keep thinking laser tag.
and laser tag sounds like a great idea.
We could use real lasers! Everybody build your own laser gun!
Offline
RadioC1ash wrote:
We could use real lasers! Everybody build your own laser gun!
i could just imagine how much effort some people would put into that, and how BIG some of the laser guns would end up being!
Offline
arseny wrote:
This was supposed to happen, but apparently the organizers didn't do a very good job or not enough people signed up or something. It's certainly a good idea, since it draws crowds. I think the "novice" difficulty should try to reach out to people who don't know what this "game" is. I thought it was a mod for Quake for the longest time!
Mod for quake? Nah.
CTF via HalfLife. (Does HL2 have it?)
Or perhaps Counterstrike (or, my all time favorite, Team Fortress)
Offline
soup wrote:
I just keep thinking laser tag.
and laser tag sounds like a great idea.
Even better... laser tag w/ Segways. ;-D
But, no, I think laser tag would be a blast. I'd play.
Offline
soup wrote:
I just keep thinking laser tag.
and laser tag sounds like a great idea.
Or perhaps Capture the Flag With Stuff.
Offline
How about a network CTF where the terminals had to be fought for and protected with people with lazers? I.E. people would have to get hackers to the proper terminals to get the virtual flag.
Offline
SgtJonson wrote:
How about a network CTF where the terminals had to be fought for and protected with people with lazers? I.E. people would have to get hackers to the proper terminals to get the virtual flag.
That sounds like HELLA fun. And they'd have to do a simple hack on the terminal to actually get the flag. So there's cracking stuff for the computer hackers and CtF stuff for people who specialize in other types of hacking. Perhaps throw some social engineering in somehow?
Offline
What about live cd's available set up to run a CTF game so you could try and defend your own box with out much risk (i dunno how you would get around people mounting your hd, Maybe disable commands like that?) or you can just reboot minus the cd and attack boxes?
Offline
s25 wrote:
What about live cd's available set up to run a CTF game so you could try and defend your own box with out much risk (i dunno how you would get around people mounting your hd, Maybe disable commands like that?) or you can just reboot minus the cd and attack boxes?
I like the other ideas that had a physical real world element to it. Not everyone knows how to do box security nor is interested in it, so having one that had a physical element to it would get more people playing and into it than would play otherwise.
(It's one of the main issues I've always had with Hack or Halo at Shmoocon. However, people are very encouraging to people who haven't played before to get them playing. [I had never played Halo before the last HoH at Shmoocon. Word of that got around and I had people whom I had never met congratulating me on my first Halo frag ever after my turn on the game.] And last HoH they let you have teams working on a single computer at hack [as long as only one person was sitting at the keyboard and typing] and I know that Renderman and Grey were teaching someone who had never hacked before what to do.)
Offline
For the real world element - hackers with frickin laser beams attached to their heads!
I think we would be able to draw people in if we did a round or two that was more informative than competitive - think attendees vs. staff who are guiding them rather than a free for all. And not attendees vs. NOC staff - lol.
Offline
I don't see how you would incorporate real word aspects... And I personally think that lazers would get messy! I don't like the idea of people running and jumping around some machines.
What if you put a lock on the machine that you had to pick? I mean if you want a lazer wars type set up then why not just hire one of those things for it? And with regards of box security and people not knowing I certainly do not know it all but I think it would be fun to just be around and learn with other people...
Ok I see I sound rather angry there but I am not (must be lack of food
) But I am just getting the feeling of well... A camel is a horse designed by a committee. I think it is going away from what is a very good idea, Sure the RealWorld aspects are good and some of the suggestions where great but I think allot of them would be hard to implement and some of them take away from the original idea,
Also we could set it up so there are four boxes there that are being used by people you can see what they are doing on a screen, That way people could watch and stuff and the idea of staff against some of the con goers is brilliant.
I think it would attract people if not only just to watch. And as long as people were encouraging it would be a great grounding for some, Fuck have someone talk there way through getting past a service and play it on a loop at a monitor ![]()
Offline
Wasn't there some sort of CTF tournament organized not too long ago where the nyc2600 crowd squared off against a local university? That seemed to be a success and can probably be carried over for the conf.
Also, if somebody wants to do a physical CTF then they should go right ahead but I think that mixing the 2 into 1 tournament is a bad idea. Running around playing laser tag won't be conductive to the exploratory aspect of the hacking CTF challenge.
Also, having laser tag inside Hotel Penn will probably not be a good idea unless you want to have a dozen people running and jumping around sensitive equipment.
Offline